Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
File: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft (raw, json)
Hash identifier: IZfzThJuC7pAu+smByKqEBU4hJvdoJgoO5exqN5+KmI=
Subject key identifier: 52:1F:55:5E:3A:C7:84:A6:0B:18:0B:79:C5:0B:4E:D4:32:FC:51:71
Authority key identifier: 9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
Certificate issuer: /CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Certificate serial: 019A2108F4F806D905518A08DC16843C375D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 15:00:26 +0000
Manifest this update: Sun 26 Oct 2025 15:00:26 +0000
Manifest next update: Mon 27 Oct 2025 15:00:26 +0000
Files and hashes: 1: nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl (hash: B7r+hIExhwwZ+6Ll8AQz+fIDwKbVHqqd1ZyroRXmbpo=)
2: qtN5JDorwotYpcUYWZc-ptH61p4.roa (hash: fKxhmPTYMHuqQdNEmPm2wnJirNcSsOemwlg1fw0Aem0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:f4:f8:06:d9:05:51:8a:08:dc:16:84:3c:37:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d7bb004201fd05b49d1221fce4759ea70bec684
Validity
Not Before: Oct 26 15:00:26 2025 GMT
Not After : Oct 27 15:00:26 2025 GMT
Subject: CN=521f555e3ac784a60b180b79c50b4ed432fc5171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:e6:da:ef:7e:ed:a5:5b:07:5f:c8:32:ec:
d5:59:82:5f:2a:35:fd:8a:f1:75:5c:24:f6:c1:eb:
e1:df:5d:06:58:9b:fb:35:bd:6b:f3:79:e5:97:43:
b3:1b:53:e8:d4:3f:a8:ed:93:aa:10:98:f3:59:c6:
1e:bb:99:11:ac:63:99:fd:55:fd:dc:bd:8b:ce:7b:
4b:6a:ba:80:b4:15:cc:ce:7e:43:87:3f:8e:c9:09:
2f:e2:bc:cb:0d:7b:ca:ac:56:a8:c2:ae:a9:8e:ca:
0c:89:69:61:af:61:4e:8b:0d:80:06:8a:b6:2d:68:
6e:c9:10:07:2c:13:3d:f4:2c:d9:b3:31:3d:f2:97:
0b:80:77:68:09:3b:9d:65:9f:aa:d1:ce:f8:e8:4a:
ff:7d:ca:2c:e2:38:a7:75:b0:6b:da:a5:22:00:d0:
29:d4:4e:14:79:6a:4b:59:86:5e:6b:86:da:58:b7:
23:3a:3b:6a:19:2b:23:1a:e8:6e:92:26:db:4f:47:
c1:60:7e:2d:28:8c:ce:53:81:68:7e:21:bf:72:c4:
b8:a9:97:b8:a8:35:fb:03:e6:ea:cb:83:59:6e:61:
52:8a:c0:03:46:7b:d8:e5:2d:bf:09:a1:a6:df:2e:
24:5f:c0:4d:9d:fe:e1:3f:6e:ce:4e:30:7f:9c:46:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:55:5E:3A:C7:84:A6:0B:18:0B:79:C5:0B:4E:D4:32:FC:51:71
X509v3 Authority Key Identifier:
keyid:9D:7B:B0:04:20:1F:D0:5B:49:D1:22:1F:CE:47:59:EA:70:BE:C6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/af15eb-7a4d-4b0e-bebb-e9bede00c6af/1/nXuwBCAf0FtJ0SIfzkdZ6nC-xoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:df:63:d6:cb:16:6a:99:a7:bb:d8:37:af:a8:a1:11:6d:
a3:9b:82:16:e6:69:bb:55:33:40:56:18:5a:99:00:8a:29:96:
0e:6b:19:74:fb:bf:fc:99:16:05:00:1a:41:36:b1:6d:01:d3:
00:e4:e1:10:8b:03:00:7d:58:b5:02:86:40:52:f1:a7:cb:04:
49:fc:f8:5a:ec:8e:2a:4d:52:88:d4:11:10:80:01:36:0b:c8:
69:ba:bd:ad:18:97:01:72:0b:50:8f:12:f4:bb:a1:9c:e1:92:
2b:a1:38:12:ec:95:fe:68:99:44:a6:a6:e0:8e:fa:06:9c:37:
95:ec:9a:23:c7:5f:97:90:07:f8:c6:d2:da:ac:57:60:71:e2:
38:55:24:70:32:e7:5e:e3:0b:62:6f:91:d5:40:57:21:6c:cd:
e1:43:38:fc:e2:a1:6f:fe:ab:bb:b9:31:7c:f1:c8:eb:57:cf:
37:6f:52:e0:2b:9f:15:1a:3c:3f:3e:30:d2:81:dc:d7:fc:fa:
97:9e:4e:1b:88:e4:dc:92:3f:5f:04:0e:d5:67:19:d2:45:0a:
5b:09:d3:22:b0:d3:68:39:50:d7:fa:13:92:07:87:01:9c:37:
ea:28:d7:ad:87:5a:0d:09:48:ee:e6:72:a2:17:02:66:b9:10:
06:b3:7e:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCPT4BtkFUYoI3BaEPDddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkN2JiMDA0MjAxZmQwNWI0OWQxMjIxZmNlNDc1OWVhNzBi
ZWM2ODQwHhcNMjUxMDI2MTUwMDI2WhcNMjUxMDI3MTUwMDI2WjAzMTEwLwYDVQQD
Eyg1MjFmNTU1ZTNhYzc4NGE2MGIxODBiNzljNTBiNGVkNDMyZmM1MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNDm2u9+7aVbB1/IMuzVWYJfKjX9
ivF1XCT2wevh310GWJv7Nb1r83nll0OzG1Po1D+o7ZOqEJjzWcYeu5kRrGOZ/VX9
3L2LzntLarqAtBXMzn5Dhz+OyQkv4rzLDXvKrFaowq6pjsoMiWlhr2FOiw2ABoq2
LWhuyRAHLBM99CzZszE98pcLgHdoCTudZZ+q0c746Er/fcos4jindbBr2qUiANAp
1E4UeWpLWYZea4baWLcjOjtqGSsjGuhukibbT0fBYH4tKIzOU4FofiG/csS4qZe4
qDX7A+bqy4NZbmFSisADRnvY5S2/CaGm3y4kX8BNnf7hP27OTjB/nEYE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIfVV46x4SmCxgLecULTtQy/FFxMB8GA1UdIwQY
MBaAFJ17sAQgH9BbSdEiH85HWepwvsaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmIt
ZTliZWRlMDBjNmFmLzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9hZjE1ZWItN2E0ZC00YjBlLWJlYmItZTliZWRlMDBjNmFm
LzEvblh1d0JDQWYwRnRKMFNJZnprZFo2bkMteG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSffY9bL
FmqZp7vYN6+ooRFto5uCFuZpu1UzQFYYWpkAiimWDmsZdPu//JkWBQAaQTaxbQHT
AOThEIsDAH1YtQKGQFLxp8sESfz4WuyOKk1SiNQREIABNgvIabq9rRiXAXILUI8S
9LuhnOGSK6E4EuyV/miZRKam4I76Bpw3leyaI8dfl5AH+MbS2qxXYHHiOFUkcDLn
XuMLYm+R1UBXIWzN4UM4/OKhb/6ru7kxfPHI61fPN29S4CufFRo8Pz4w0oHc1/z6
l55OG4jk3JI/XwQO1WcZ0kUKWwnTIrDTaDlQ1/oTkgeHAZw36ijXrYdaDQlI7uZy
ohcCZrkQBrN+vw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 17:40:30 2025 by rpki-client